I already posted this, but got no suggestions.
I am trying to get the user name in IRP_MJ_CREATE in a file system
filter.
To do that, I queue a worker item, that calls
SeQueryAuthenticationIdToken, then GetSecurityUserInfo to get the user
name (including the domain, and logon server).
I pass the ClientToken to the functions, if it’s non-NULL, and
PrimaryToken otherwise.
However, if the driver is running on NT 4 (both Wks and Srv), and
another computer accesses its file via the network, the
GetSecurityUserInfo fails with status 0xC00005F
(STATUS_NO_SUCH_LOGON_SESSION).
Does anybody have any idea?
–
Kind regards, Dejan M. www.alfasp.com
E-mail: xxxxx@alfasp.com ICQ#: 56570367
Alfa File Monitor - File monitoring library for Win32 developers.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa Registry Monitor - Registry monitoring library for Win32
developers.
Alfa Registry Protector - Registry protection library for Win32
developers.
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> I am trying to get the user name in IRP_MJ_CREATE in a file system
filter.
To do that, I queue a worker item, that calls
SeQueryAuthenticationIdToken, then GetSecurityUserInfo to get the user
Try using SID queries instead of SeQueryAuthenticationIdToken. This worked fine for me on NT4 and being accessed from SRV.
Max
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Do you mean by getting the SID and having a UM service do the actual name query? If so, it’s not an option.
> I am trying to get the user name in IRP_MJ_CREATE in a file system
> filter.
> To do that, I queue a worker item, that calls
> SeQueryAuthenticationIdToken, then GetSecurityUserInfo to get the user
Try using SID queries instead of SeQueryAuthenticationIdToken. This worked fine for me on NT4 and being accessed from SRV.
–
Kind regards, Dejan M. www.alfasp.com
E-mail: xxxxx@alfasp.com ICQ#: 56570367
Alfa File Monitor - File monitoring library for Win32 developers.
Alfa File Protector - File protection and hiding library for Win32 developers.
Alfa Registry Monitor - Registry monitoring library for Win32 developers.
Alfa Registry Protector - Registry protection library for Win32 developers.
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Why you need user names in kmode? Why not use SIDs?
Max
----- Original Message -----
From: “Dejan Maksimovic”
To: “File Systems Developers”
Sent: Tuesday, January 29, 2002 2:07 AM
Subject: [ntfsd] Re: GetSecurityUserInfo failure (0xC000005F)
>
> Do you mean by getting the SID and having a UM service do the actual name query? If so, it’s not an option.
>
> > > I am trying to get the user name in IRP_MJ_CREATE in a file system
> > > filter.
> > > To do that, I queue a worker item, that calls
> > > SeQueryAuthenticationIdToken, then GetSecurityUserInfo to get the user
> >
> > Try using SID queries instead of SeQueryAuthenticationIdToken. This worked fine for me on NT4 and being accessed from SRV.
>
> –
> Kind regards, Dejan M. www.alfasp.com
> E-mail: xxxxx@alfasp.com ICQ#: 56570367
> Alfa File Monitor - File monitoring library for Win32 developers.
> Alfa File Protector - File protection and hiding library for Win32 developers.
> Alfa Registry Monitor - Registry monitoring library for Win32 developers.
> Alfa Registry Protector - Registry protection library for Win32 developers.
>
>
>
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
—
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
The thing is that the code is SUPPOSED to work, and I just need it
that way - can we leave it at that?
“Maxim S. Shatskih” wrote:
Why you need user names in kmode? Why not use SIDs?
> Do you mean by getting the SID and having a UM service do the actual name query? If so, it’s not an option.
–
Kind regards, Dejan M. www.alfasp.com
E-mail: xxxxx@alfasp.com ICQ#: 56570367
Alfa File Monitor - File monitoring library for Win32 developers.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa Registry Monitor - Registry monitoring library for Win32
developers.
Alfa Registry Protector - Registry protection library for Win32
developers.
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com